Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2020-1945

Quick assessment

Affected
n/a Apache Ant
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Apache Ant是美国阿帕奇（Apache）基金会的一套用于Java软件开发的自动化工具。该工具主要用于软件的编译、测试和部署等。 Apache Ant 1.1版本至1.9.14版本和1.10.0版本至1.10.7版本中存在信息泄露漏洞。攻击者可利用该漏洞泄漏敏感信息。

AI Predicted 5.3 Difficulty: Hard EPSS 1.81% · P77
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-1945

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Apache Ant 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache Ant是美国阿帕奇（Apache）基金会的一套用于Java软件开发的自动化工具。该工具主要用于软件的编译、测试和部署等。 Apache Ant 1.1版本至1.9.14版本和1.10.0版本至1.10.7版本中存在信息泄露漏洞。攻击者可利用该漏洞泄漏敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- Apache Ant Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 -

II. Public POCs for CVE-2020-1945

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-1945

请登录查看更多情报信息。

Vendor Advisories for CVE-2020-1945 (9)

Mailing List Discussions for CVE-2020-1945 (40)

Same Patch Batch · n/a · 2020-05-14 · 47 CVEs total

CVE-2020-0091 Android mnld组件信息泄露漏洞
CVE-2020-0064 Android Omacp组件安全漏洞
CVE-2020-0220 Android Audio driver 缓冲区错误漏洞
CVE-2020-12068 3S-Smart Software Solutions CODESYS Development System 安全漏洞
CVE-2020-12046 Opto 22 SoftPAC Project 数据伪造问题漏洞
CVE-2020-10612 Opto 22 SoftPAC Project 访问控制错误漏洞
CVE-2020-10616 Opto 22 SoftPAC Project 代码问题漏洞
CVE-2020-10620 Opto 22 SoftPAC Project 授权问题漏洞
CVE-2020-12042 Opto 22 SoftPAC Project 数据伪造问题漏洞
CVE-2020-0090 Android Email组件安全漏洞
CVE-2020-0065 Android Suite Daemon 安全漏洞
CVE-2020-0093 Android 缓冲区错误漏洞
CVE-2020-0106 Android System 信息泄露漏洞
CVE-2020-0094 Android Media Framework 缓冲区错误漏洞
CVE-2020-0110 Android Kernel Scheduler 缓冲区错误漏洞
CVE-2020-0103 Android System 缓冲区错误漏洞
CVE-2020-0109 Android System 安全漏洞
CVE-2020-0097 Android Framework 安全漏洞
CVE-2020-0096 Android Framework 安全漏洞
CVE-2020-0092 Android System 信息泄露漏洞

Showing top 20 of 47 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Apache Ant
Same vendor: n/a

V. Comments for CVE-2020-1945

No comments yet

Leave a comment